elf(1)elf(1)NAMEelf - command-line ELF object file header analyzer
SYNOPSISelf -[acdefmnoprstiuvxzAXIHV] [file]
DESCRIPTIONelf is an ELF header (e_header) statistics tool. It allows you to
gather various statistics about a binary's ELF header, elf concen‐
trates on the e_header itself. This allows for some more usability in
many instances (be it by an end-user or application).
ELF is the acroynm for "executable and linkable format". It is the
standard executable format amongst most modern UNIX and UNIX-like oper‐
ating systems. For more information consult your local ELF header file
(usually /usr/include/elf.h).
For a list of elf's current features, please use the help command in
elf.
COMMANDLINE OPTIONSelf has many command-line options to allow verbose information to be
presented based on the values inside a file's ELF header (if existant).
-a output ABI of selected ELF object file
-c output class-object sizes
-d output data encoding type
-e output virtual entry point
-f output processor specific flags
-m output architecture meant for object file
-n output program header entry count
-o output section header entry size
-p output program header offset
-r output ELF header size
-s output section header offset (in bytes)
-t output ELF object file type
-i output ELF magic values
-u output section header entry count
-v output ELF version used in object file
-x output section header string index
-z output program header entry size
-A output all information provided by ELF header
-X output any selected information in hex
-I output any selected information in decimal (base 10)
-H output any selected information in human-centric values (default)
Geeks may use above options
-V this sets level of verbosity. The more times repeated, the more ver‐
bose output will be
INTERACTIVE MODE OPTIONS
There are many options in elf's interactive mode to show specific
information about the ELF header. These options can be listed with the
following command: (elf) help info
These are the info Options:
ALL
Show all of the ELF header information.
IDENT
Show ELF header ident.
CLASS
Show class object sizes.
DATA
Show data encoding.
ABI
Show ELF header operating system ABI.
TYPE
Show ELF object file type.
MACHINE
Show ELF object file machine information.
VERSION
Show ELF version of object file.
ENTRY
Show virtual entry point of ELF object file.
PHOFF
Show program header offset.
FLAGS
Show processor specific flags of object file
EHSIZE
Show ELF header size.
PHENTSIZE
Show program entry size.
PHNUM
Show number of program header entries.
SHENTSIZE
Show section header entry size.
SHNUM
Show number of section header entries.
SHSTRNDX
Show section header string table index.
There are also three modifiers that can be used with the above options.
They are:
hex
Show the output in hex format.
int
Show the output in integer format.
hum
Show the output in human readable format
SEE ALSOas(1), gdb(1), ld(1), execve(2), core(5), elf(5), link(5)AUTHORS
Samy Al Bahra <samy@kerneled.com>
CONTRIBUTORS
Eirik Nygaard <eirikn@bluezone.no> , Vanya Sergeev
DISTRIBUTION
The latest version of elf can be obtained from
http://www.kerneled.com/projects/elf/index.html
Consult the GNU General Public License for more information (it is
located in the COPYING file of the elf distribution).
BUGS
Report bugs to <samy@kerneled.com>
elf version 0.5.4p1 December 17, 2002 elf(1)
